deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 05:17:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Mo Updates

Browse Source
This commit is contained in:
Vinay Pamnani 2023-03-27 15:19:01 -04:00
parent baa321ad17
commit 30329054f8
7 changed files with 30 additions and 39 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
windows/client-management/mdm/laps-csp.md
View File

@ -4,7 +4,7 @@ description: Learn more about the LAPS CSP.
author: vinaypamnani-msft author: vinaypamnani-msft
manager: aaroncz manager: aaroncz
ms.author: vinpa ms.author: vinpa
ms.date: 02/28/2023 ms.date: 03/27/2023
ms.localizationpriority: medium ms.localizationpriority: medium
ms.prod: windows-client ms.prod: windows-client
ms.technology: itpro-manage ms.technology: itpro-manage
@ -746,7 +746,7 @@ If not specified, this setting will default to 3 (Reset the password and logoff
| Value | Description | | Value | Description |
|:--|:--| |:--|:--|
| 1 | Reset password: upon expiry of the grace period, the managed account password will be reset. | | 1 | Reset password: upon expiry of the grace period, the managed account password will be reset. |
| 3 (Default) | Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will be terminated. | | 3 (Default) | Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will terminated. |
| 5 | Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted. | | 5 | Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted. |
<!-- Device-Policies-PostAuthenticationActions-AllowedValues-End --> <!-- Device-Policies-PostAuthenticationActions-AllowedValues-End -->

6
windows/client-management/mdm/policies-in-policy-csp-supported-by-surface-hub.md
View File

@ -15,11 +15,7 @@ ms.topic: reference
# Policies in Policy CSP supported by Windows 10 Team # Policies in Policy CSP supported by Windows 10 Team
This article lists the policies in Policy CSP that are applicable for Windows 10 Team. This article lists the policies in Policy CSP that are applicable for the Surface Hub operating system, **Windows 10 Team**.
## Accounts
- [AllowMicrosoftAccountConnection](policy-csp-accounts.md#allowmicrosoftaccountconnection)
## ApplicationDefaults ## ApplicationDefaults

4
windows/client-management/mdm/policy-csp-admx-smartcard.md
View File

@ -4,7 +4,7 @@ description: Learn more about the ADMX_Smartcard Area in Policy CSP.
author: vinaypamnani-msft author: vinaypamnani-msft
manager: aaroncz manager: aaroncz
ms.author: vinpa ms.author: vinpa
ms.date: 03/23/2023 ms.date: 03/27/2023
ms.localizationpriority: medium ms.localizationpriority: medium
ms.prod: windows-client ms.prod: windows-client
ms.technology: itpro-manage ms.technology: itpro-manage
@ -798,7 +798,7 @@ By default the user principal name (UPN) is displayed in addition to the common
If you enable this policy setting or do not configure this setting, then the subject name will be reversed. If you enable this policy setting or do not configure this setting, then the subject name will be reversed.
If you disable, the subject name will be displayed as it appears in the certificate. If you disable , the subject name will be displayed as it appears in the certificate.
<!-- ReverseSubject-Description-End --> <!-- ReverseSubject-Description-End -->
<!-- ReverseSubject-Editable-Begin --> <!-- ReverseSubject-Editable-Begin -->

4
windows/client-management/mdm/policy-csp-browser.md
View File

@ -4,7 +4,7 @@ description: Learn more about the Browser Area in Policy CSP.
author: vinaypamnani-msft author: vinaypamnani-msft
manager: aaroncz manager: aaroncz
ms.author: vinpa ms.author: vinpa
ms.date: 03/23/2023 ms.date: 03/27/2023
ms.localizationpriority: medium ms.localizationpriority: medium
ms.prod: windows-client ms.prod: windows-client
ms.technology: itpro-manage ms.technology: itpro-manage
@ -2901,7 +2901,7 @@ Don't enable both this setting and the Keep favorites in sync between Internet E
<!-- PreventAccessToAboutFlagsInMicrosoftEdge-Description-Begin --> <!-- PreventAccessToAboutFlagsInMicrosoftEdge-Description-Begin -->
<!-- Description-Source-ADMX --> <!-- Description-Source-ADMX -->
This policy settings lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features.
- If you enable this policy setting, employees can't access the about:flags page. - If you enable this policy setting, employees can't access the about:flags page.

9
windows/client-management/mdm/policy-csp-defender.md
View File

@ -4,7 +4,7 @@ description: Learn more about the Defender Area in Policy CSP.
author: vinaypamnani-msft author: vinaypamnani-msft
manager: aaroncz manager: aaroncz
ms.author: vinpa ms.author: vinpa
ms.date: 03/23/2023 ms.date: 03/27/2023
ms.localizationpriority: medium ms.localizationpriority: medium
ms.prod: windows-client ms.prod: windows-client
ms.technology: itpro-manage ms.technology: itpro-manage
@ -697,12 +697,7 @@ Allows or disallows Windows Defender Realtime Monitoring functionality.
<!-- AllowScanningNetworkFiles-OmaUri-End --> <!-- AllowScanningNetworkFiles-OmaUri-End -->
<!-- AllowScanningNetworkFiles-Description-Begin --> <!-- AllowScanningNetworkFiles-Description-Begin -->
<!-- Description-Source-ADMX --> <!-- Description-Source-Manual-Forced -->
This policy setting allows you to configure scanning for network files. It is recommended that you do not enable this setting.
- If you enable this setting, network files will be scanned.
- If you disable or do not configure this setting, network files will not be scanned.
<!-- AllowScanningNetworkFiles-Description-End --> <!-- AllowScanningNetworkFiles-Description-End -->
<!-- AllowScanningNetworkFiles-Editable-Begin --> <!-- AllowScanningNetworkFiles-Editable-Begin -->

40
windows/client-management/mdm/surfacehub-csp.md
View File

@ -4,7 +4,7 @@ description: Learn more about the SurfaceHub CSP.
author: vinaypamnani-msft author: vinaypamnani-msft
manager: aaroncz manager: aaroncz
ms.author: vinpa ms.author: vinpa
ms.date: 03/24/2023 ms.date: 03/27/2023
ms.localizationpriority: medium ms.localizationpriority: medium
ms.prod: windows-client ms.prod: windows-client
ms.technology: itpro-manage ms.technology: itpro-manage
@ -36,7 +36,7 @@ The following list shows the SurfaceHub configuration service provider nodes:
- [ExchangeModernAuthEnabled](#deviceaccountexchangemodernauthenabled) - [ExchangeModernAuthEnabled](#deviceaccountexchangemodernauthenabled)
- [ExchangeServer](#deviceaccountexchangeserver) - [ExchangeServer](#deviceaccountexchangeserver)
- [Password](#deviceaccountpassword) - [Password](#deviceaccountpassword)
- [PasswordRotationPeriod](#deviceaccountpasswordrotationperiod) - [PasswordRotationEnabled](#deviceaccountpasswordrotationenabled)
- [SipAddress](#deviceaccountsipaddress) - [SipAddress](#deviceaccountsipaddress)
- [UserName](#deviceaccountusername) - [UserName](#deviceaccountusername)
- [UserPrincipalName](#deviceaccountuserprincipalname) - [UserPrincipalName](#deviceaccountuserprincipalname)
@ -482,53 +482,53 @@ Password for the device account. Get is allowed here, but will always return a b
<!-- Device-DeviceAccount-Password-End --> <!-- Device-DeviceAccount-Password-End -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-Begin --> <!-- Device-DeviceAccount-PasswordRotationEnabled-Begin -->
### DeviceAccount/PasswordRotationPeriod ### DeviceAccount/PasswordRotationEnabled
<!-- Device-DeviceAccount-PasswordRotationPeriod-Applicability-Begin --> <!-- Device-DeviceAccount-PasswordRotationEnabled-Applicability-Begin -->
| Scope | Editions | Applicable OS | | Scope | Editions | Applicable OS |
|:--|:--|:--| |:--|:--|:--|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later | | :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
<!-- Device-DeviceAccount-PasswordRotationPeriod-Applicability-End --> <!-- Device-DeviceAccount-PasswordRotationEnabled-Applicability-End -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-OmaUri-Begin --> <!-- Device-DeviceAccount-PasswordRotationEnabled-OmaUri-Begin -->
```Device ```Device
./Vendor/MSFT/SurfaceHub/DeviceAccount/PasswordRotationPeriod ./Vendor/MSFT/SurfaceHub/DeviceAccount/PasswordRotationEnabled
``` ```
<!-- Device-DeviceAccount-PasswordRotationPeriod-OmaUri-End --> <!-- Device-DeviceAccount-PasswordRotationEnabled-OmaUri-End -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-Description-Begin --> <!-- Device-DeviceAccount-PasswordRotationEnabled-Description-Begin -->
<!-- Description-Source-DDF --> <!-- Description-Source-DDF -->
Specifies whether automatic password rotation is enabled. If you enforce a password expiration policy on the device account, use this setting to allow the device to manage its own password by changing it frequently, without requiring you to manually update the account information when the password expires. You can reset the password at any time using Active Directory (or Azure AD). Specifies whether automatic password rotation is enabled. If you enforce a password expiration policy on the device account, use this setting to allow the device to manage its own password by changing it frequently, without requiring you to manually update the account information when the password expires. You can reset the password at any time using Active Directory (or Azure AD).
<!-- Device-DeviceAccount-PasswordRotationPeriod-Description-End --> <!-- Device-DeviceAccount-PasswordRotationEnabled-Description-End -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-Editable-Begin --> <!-- Device-DeviceAccount-PasswordRotationEnabled-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. --> <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-Editable-End --> <!-- Device-DeviceAccount-PasswordRotationEnabled-Editable-End -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-DFProperties-Begin --> <!-- Device-DeviceAccount-PasswordRotationEnabled-DFProperties-Begin -->
**Description framework properties**: **Description framework properties**:
| Property name | Property value | | Property name | Property value |
|:--|:--| |:--|:--|
| Format | int | | Format | int |
| Access Type | Get, Replace | | Access Type | Get, Replace |
<!-- Device-DeviceAccount-PasswordRotationPeriod-DFProperties-End --> <!-- Device-DeviceAccount-PasswordRotationEnabled-DFProperties-End -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-AllowedValues-Begin --> <!-- Device-DeviceAccount-PasswordRotationEnabled-AllowedValues-Begin -->
**Allowed values**: **Allowed values**:
| Value | Description | | Value | Description |
|:--|:--| |:--|:--|
| 0 | Password rotation enabled. | | 0 | Password rotation enabled. |
| 1 | Disabled. | | 1 | Disabled. |
<!-- Device-DeviceAccount-PasswordRotationPeriod-AllowedValues-End --> <!-- Device-DeviceAccount-PasswordRotationEnabled-AllowedValues-End -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-Examples-Begin --> <!-- Device-DeviceAccount-PasswordRotationEnabled-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. --> <!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-Examples-End --> <!-- Device-DeviceAccount-PasswordRotationEnabled-Examples-End -->
<!-- Device-DeviceAccount-PasswordRotationPeriod-End --> <!-- Device-DeviceAccount-PasswordRotationEnabled-End -->
<!-- Device-DeviceAccount-SipAddress-Begin --> <!-- Device-DeviceAccount-SipAddress-Begin -->
### DeviceAccount/SipAddress ### DeviceAccount/SipAddress

2
windows/client-management/mdm/toc.yml
View File

@ -49,7 +49,7 @@ items:
href: policies-in-policy-csp-supported-by-hololens-1st-gen-development-edition.md href: policies-in-policy-csp-supported-by-hololens-1st-gen-development-edition.md
- name: Policies supported by Windows 10 IoT Core - name: Policies supported by Windows 10 IoT Core
href: policies-in-policy-csp-supported-by-iot-core.md href: policies-in-policy-csp-supported-by-iot-core.md
- name: Policies supported by Microsoft Windows 10 Team - name: Policies supported by Windows 10 Team
href: policies-in-policy-csp-supported-by-surface-hub.md href: policies-in-policy-csp-supported-by-surface-hub.md
- name: Policies that can be set using Exchange Active Sync (EAS) - name: Policies that can be set using Exchange Active Sync (EAS)
href: policies-in-policy-csp-that-can-be-set-using-eas.md href: policies-in-policy-csp-that-can-be-set-using-eas.md